This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.
About Panorama Discussions
Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

Discussions

Start a conversation

Welcome to the Panorama Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4881 Views
  • 0 replies
  • 0 Likes

Change all IP address for firewall HA pair managed in Panorama

I have a HA firewall pair managed by Panorama. I would like to change all of the IP addresses of the interfaces. It's a lot to try to do through the GUI. My thinking is export the template as XML, make the necessary changes, and then import again. The firewall HA pair is a test harness. The existing configuration is from my production firewalls....

khsieh by • L2 Linker
  • 6189 Views
  • 3 replies
  • 0 Likes

Resolved! SDWAN PAN-OS and Panorama - Docs are rough

I am working through the panorama/sdwan plugin docs for a new deployment using Nextgen firewalls' built in SDWAN, all on 10.0.6 and the plugin version is 2.1In the docs there seems to be some conflicting advice. See below. Anyone know which is correct here? I have to ship these devices off, and obviously having this setting wrong will cause some...

dpayne_0-1623254186161.png
dpayne by • L1 Bithead
  • 3575 Views
  • 2 replies
  • 0 Likes

Resolved! eventid: mem-limit-exceeded in Panorama

We have received below email alert from Panorama , what is the meaning of this high severity system logs ?actionflags: 0x0type: SYSTEMsubtype: resctrlconfig_ver: 0time_generated: 2021/06/04 08:41:01high_res_timestamp: 2021-06-04T08:41:01.000+05:30dg_hier_level_1: 0dg_hier_level_2: 0dg_hier_level_3: 0dg_hier_level_4: 0vsys_name:device_name: Panor...

Deepak25 by • L3 Networker
  • 3866 Views
  • 1 replies
  • 0 Likes

master device in panorama device-group if using dataplane interface

Due to high cpu utilization in firewall , we want to use dataplane interface of firewall for user-id services.Currently , when primary firewall failover to secondary we do not require to change master device in panorama device-group.How panorama collecting user-id info if primary firewall which selected as a master in device-group becomes passiv...

Deepak_K_0-1622112578545.png
Deepak_K by • L3 Networker
  • 4003 Views
  • 3 replies
  • 0 Likes

Resolved! Do we need to separately upgrade a local log collector during a Panorama upgrade?

Hi All, We are going to perform a Panorama upgrade from 8.1.15 to 9.1.9. The upgrade path is 8.1.15 --> 8.1.19 --> 9.0 (Download Only) --> 9.0.13 --> 9.1 ( Download Only ) --> 9.1.9 ( Preferred version ). In this environment, there is a local log collector configured in the same Panorama ( Collector serial number is the same as th...

Udana by • L1 Bithead
  • 3829 Views
  • 3 replies
  • 0 Likes

Panorama mgmt CPU usage

We are managing 4 location HA pair from Panorama and collecting logs using management interface of M200. (all devices and panorama in same data centre)Sometimes we observed delay in logs and commit operation , but mgmt cpu of M200 is less than 50% at that time.mgmt cpu utilization in panorama is showing utilization of only mgmt interface or over...

Deepak_K by • L3 Networker
  • 4295 Views
  • 1 replies
  • 0 Likes

Pamorama Management Only Mode not show log on GUI

We have issue about Panorama Management Only Mode not show logs.We have M-200 run on Collector mode and Panorama-VM run on Management Only.This's new setup and the firewall can forward log to collector but Panorama Management Only mode not show log on GUI. We tried to restart and reboot the panorama. > debug software restart log-receiver , &g...

Jitaphon by • L2 Linker
  • 3086 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama compatibility with previous versions

Do you know if Panorama could manage firewalls with versions far from the actual? For example, if I have a Panorama running version 10.0.x, can I manage firewalls running 8.0.x, 8.1.x, 9.0.x? or how many previous version could manage?

emendezo by • L1 Bithead
  • 4436 Views
  • 2 replies
  • 0 Likes

Panorama GUI wont respond after upgrading beyond 10.0.0

We upgraded to 10.0.0 and all was well until we realised we cant upload variables in to our templates. Then found the bug fix was resolved in 10.0.1 and above. Now that we try to upgrade to any version beyond 10.0.0 up to the latest 10.0.6 SSH remains functional however the web gui crashes. I've already reset the management web services which ha...

Is the Palo Alto Device name that is configured under "Panorama > SD-WAN > Devices" the hostname of the firewall?

My question is the Device name under "Panorama > SD-WAN > Devices" the hostname of the firewall under "Device > Setup > Management"? Is this the way the firewall knows for example that it is "branch-1" in the SD-WAN cluster configuration? https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-web-interface-help/panorama-web-interface/...

Panorama system logs -> Sending to Slack via HTTP profile -> NEED TO SEND PANORAMA DEVICE HOSTNAME

I am using an HTTP profile to send PANORAMA CRITICAL SYSTEM events to Slack. The integration is working well. My Panoramas are an A/P HA cluster. The issue that I have is that I'm unable to delineate the device names via the HTTP profile payload (because the HTTP profile payload gets duplicated between both the active and the passive device). ...

Panorama Managed Device Health Report Using Email schedule

Hi All, I am trying to see if we can automate functionality to generate device health reports daily using Panorama. I have checked the custom report but don't see any option. Currently, I am pulling details manually using -- Panorama ----- > managed device --- > health. Any help in this regard would be great.

Sambhu21 by • L1 Bithead
  • 3019 Views
  • 1 replies
  • 1 Likes

Panorama takes excessive time to complete commit to firewalls, stuck at 50%

The push to the standby firewall occurs quickly (1-3 minutes).The push to the active firewall is stuck for a long time. I notice the config does finally get to the active firewall, but Panorama still shows push in progress.Note in the second picture that the push completed to the standby firewall already, but stuck at the active firewall.

Panorama push stuck at 50-1.JPG
Panorama push stuck at 50-2.JPG
bkoch709 by • L1 Bithead
  • 7338 Views
  • 4 replies
  • 0 Likes
  • 847 Posts
  • 47 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks